Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: gc8BzeT6xkI0+Gc3QPHfxIvrkLT603Sut0Ji1E4dMSc=
Subject key identifier: 17:B1:97:94:2C:A8:41:42:1F:C7:A4:87:E0:67:C2:32:D0:C0:BF:3B
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019D394135C5DC3765FE422695CFAA8D72E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0F9F
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: MYkjTNS5pTUmvEKTb16E0wuNZNGFcBXf8/s+vbQ6Kts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:35:c5:dc:37:65:fe:42:26:95:cf:aa:8d:72:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=17b197942ca841421fc7a487e067c232d0c0bf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:2f:a1:93:1a:dd:8e:26:10:71:c4:56:56:
66:0b:ce:7b:7f:4b:54:23:45:9b:c2:30:d5:f2:b0:
41:45:ef:3b:de:bc:7a:a2:7a:45:12:88:62:31:28:
60:dd:05:2c:94:8d:9a:44:32:a2:81:65:21:60:70:
92:cc:81:cc:24:dd:28:45:fa:bf:9b:e9:d0:9a:7e:
57:f0:0e:36:33:65:93:10:fe:f2:e2:2d:58:64:2f:
3c:5e:d0:5f:4c:2a:08:e3:b1:51:40:7e:f8:97:a7:
5d:45:13:e7:48:1d:65:86:89:5e:9b:ad:1e:85:30:
26:bf:48:da:39:84:36:94:80:2a:fe:21:ba:8b:a3:
b3:4b:92:8a:c0:21:cc:4f:15:e4:55:d5:68:a9:32:
b5:60:9b:07:1e:92:95:48:ae:cd:f6:38:53:e4:e8:
c8:07:82:1c:9e:c0:c8:8a:11:48:c7:6b:b3:99:81:
94:8b:74:74:84:2f:ea:33:65:bb:b6:26:75:2e:3b:
3f:08:e4:3a:a8:64:6c:1a:71:af:b1:aa:45:92:61:
48:94:cd:97:93:3d:e7:f4:26:65:08:bc:69:c0:10:
05:ca:74:fa:94:3e:48:1c:ef:3a:81:62:fe:a7:15:
e7:15:de:26:67:ea:35:ce:6c:ae:d6:40:ba:f0:5b:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:97:94:2C:A8:41:42:1F:C7:A4:87:E0:67:C2:32:D0:C0:BF:3B
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:17:02:43:5b:6f:f5:cb:32:6d:fc:05:47:62:b9:1a:07:c6:
62:3d:a6:a8:b8:f1:86:46:fe:9d:18:0c:c3:14:43:50:73:d7:
c3:83:52:27:be:ab:62:af:75:ff:11:4f:e5:3e:fb:ef:17:3f:
59:5b:89:22:2a:89:52:e1:56:76:4d:cf:8e:08:7d:7c:8f:e6:
af:9d:c8:0d:a1:c6:07:3d:58:83:2c:0b:ad:0d:b0:2f:2c:27:
1d:3f:5b:60:36:8d:88:3e:bf:37:dd:56:6f:33:37:86:17:79:
3c:78:9c:cf:03:31:92:1a:f9:c9:52:01:f3:a1:ae:ec:84:a1:
e6:34:6e:73:8b:4a:e2:ca:44:ef:fa:78:82:6a:64:d2:63:d9:
25:04:04:a8:ce:1c:b2:ae:94:66:21:5a:d0:d1:43:3f:e3:a2:
12:d6:b6:2c:6f:3f:57:c7:a9:8a:2a:50:78:17:14:77:45:bd:
fc:62:b8:40:0f:2a:be:55:ac:65:65:e7:a2:1a:5f:64:68:2e:
48:27:78:0b:b4:77:ee:73:db:cb:5c:89:14:06:d0:d6:6a:b2:
19:84:30:32:20:0d:b5:4e:55:c6:10:fc:df:58:ec:0c:c9:a2:
2a:31:f2:26:c6:09:bb:10:aa:15:d4:c0:5d:d7:f9:2d:11:c6:
9f:06:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:20 2026 by rpki-client